Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/69ac3cc3-2ac1-44f8-b5e8-fbe2552056a5.roa
File:                     69ac3cc3-2ac1-44f8-b5e8-fbe2552056a5.roa (raw, json)
Hash identifier:          e/mWUw5Z4L/aAkKiDWrhVoIP4ZBRtPwczq5MKjRHNc4=
Subject key identifier:   69:AC:DE:2D:7B:5E:48:36:9A:78:F9:15:AA:F0:22:6C:8E:D4:54:E4
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       423B2435774C1732ACEDC64822953E2325FA18B5
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/69ac3cc3-2ac1-44f8-b5e8-fbe2552056a5.roa
Signing time:             Fri 10 Oct 2025 00:47:20 +0000
ROA not before:           Fri 10 Oct 2025 00:47:20 +0000
ROA not after:            Fri 14 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        15.181.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:3b:24:35:77:4c:17:32:ac:ed:c6:48:22:95:3e:23:25:fa:18:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 10 00:47:20 2025 GMT
            Not After : Nov 14 23:59:59 2025 GMT
        Subject: serialNumber=d9dbbf4cf2881638e5e7cb8752418cddf44b28aa26570770a1527ca64a38d849, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:88:eb:12:af:d7:e9:51:cf:ed:30:e3:31:bd:
                    62:cd:23:d8:8b:ce:d4:80:f2:fe:cd:d6:3e:22:ba:
                    37:46:2c:12:df:1a:62:1c:28:62:93:4f:8d:cf:03:
                    06:ca:7b:94:98:02:a3:db:37:a3:ae:82:37:31:36:
                    23:14:70:7d:03:e0:da:fe:9c:6d:02:34:c8:ed:4b:
                    7a:2e:44:aa:e2:7b:67:da:0a:8c:ed:8c:c1:91:20:
                    f5:55:6a:30:fa:a1:1b:fd:f5:f0:71:d8:09:36:b4:
                    57:36:41:ca:5e:2a:6c:cb:e9:31:49:d5:f8:7e:6e:
                    bd:c5:24:25:76:bc:de:e7:99:2b:bf:55:6a:fe:28:
                    b2:da:6d:c7:c2:a4:b5:4b:89:ab:38:e6:d2:6e:f3:
                    9c:4d:fe:07:ea:2c:44:02:a1:72:cc:1a:f4:71:6f:
                    b7:86:94:04:5e:7e:aa:bb:51:cc:00:01:48:f9:26:
                    80:7f:0a:aa:0b:1c:0e:be:c3:19:26:2f:8d:f4:88:
                    13:ba:0f:9e:78:ca:4c:bb:73:56:50:df:ee:0b:58:
                    82:71:96:92:7d:ec:8e:26:81:61:01:37:8c:ca:6e:
                    f9:fc:d4:dd:f5:54:30:9c:e1:ad:c2:05:d1:97:6d:
                    b2:0d:ef:90:d9:97:4a:fb:f4:47:ac:44:8b:90:cd:
                    e2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:AC:DE:2D:7B:5E:48:36:9A:78:F9:15:AA:F0:22:6C:8E:D4:54:E4
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/69ac3cc3-2ac1-44f8-b5e8-fbe2552056a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.181.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7b:3a:47:2b:01:91:ff:d0:5b:c1:42:9d:1f:db:83:12:a6:4b:
         e9:0c:a7:37:c7:2f:3b:ed:f1:58:3a:a4:5b:82:2c:fa:82:59:
         c9:6c:6a:fc:d8:91:be:8b:20:2b:b0:19:d8:ce:f9:40:38:ae:
         8f:8b:78:59:18:fc:a2:5a:8a:7d:74:86:f1:d2:31:3b:6b:4b:
         72:a7:e3:0b:2f:92:57:c2:44:ee:c3:ca:d6:f9:87:5e:3d:9f:
         1d:03:3a:bc:23:69:89:05:10:8d:78:57:6f:e5:6d:c2:ba:54:
         34:a4:7f:63:7a:42:af:86:6a:c1:ba:78:d0:87:53:78:29:b6:
         9b:93:8c:38:de:b7:92:7c:7a:10:ec:99:8d:40:47:54:78:76:
         69:c3:d8:7b:a7:f3:a3:f2:27:07:56:77:1a:af:7d:47:1d:ec:
         9d:62:ca:77:7d:d6:f3:2d:6f:eb:27:22:28:b2:c6:38:f3:fc:
         f8:7a:10:69:af:ae:67:df:08:dd:b4:69:67:2a:53:de:1a:a1:
         92:42:bb:bd:14:d2:ca:bf:1f:11:9a:86:3d:33:42:54:97:af:
         b8:a4:87:50:38:79:54:a8:c7:65:a8:03:6d:e1:ee:ff:5e:15:
         8b:d5:52:33:ec:e1:4c:e9:69:dd:c8:9b:a5:2c:54:c6:31:6d:
         68:c0:77:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:01:44 2025 by rpki-client